Maintaining cryptoprocessor types in a multinode environment
View Patent ↗Maintaining cryptoprocessor types in a multinode system includes receiving a selection of a cryptoprocessor type; identifying, within a multinode system, a node having a cryptoprocessor of the selected cryptoprocessor type; and designating the node having the cryptoprocessor of the selected cryptoprocessor type as a primary node for the multimode system.
1. A method comprising:
by first program instructions executing on a computing system:
receiving a selection of a first cryptoprocessor type; and
identifying and designating as a primary node a node within a multinode system having a cryptoprocessor of the first cryptoprocessor type; and
prohibiting a cryptoprocessor type firmware update of a cryptoprocessor of a non-primary node of the multinode system.
2. The method of claim 1 , wherein the cryptoprocessor type is selected from the group consisting of: a first version of trusted platform module (“TPM”), a second version of TPM, or trusted cryptography module (“TCM”).
3. The method of claim 1 , further comprising:
receiving, after initialization of the multinode system, a selection of a second cryptoprocessor type; and
responsive to receiving the second selection, changing the primary node of the multinode system to a node that includes a cryptoprocessor of the second cryptoprocessor type.
4. The method of claim 3 , further comprising adjusting a boot order so that an operating system of the multinode system remains the same after changing the primary node.
5. The method of claim 1 , wherein the selection is based at least on a security level of the first cryptoprocessor type and a security level of a second cryptoprocessor type.
6. An apparatus comprising a computer processor and a computer memory operatively coupled to the computer processor, the computer memory having disposed within it computer program instructions that, when executed by the computer processor, cause the apparatus to carry out the steps of:
receiving a selection of a first cryptoprocessor type; and
identifying and designating as a primary node a node within a multinode system having a cryptoprocessor of the first cryptoprocessor type; and
prohibiting a cryptoprocessor type firmware update of a cryptoprocessor of a non-primary node of the multinode system.
7. The apparatus of claim 6 , wherein the cryptoprocessor type is selected from the group consisting of: a first version of trusted platform module (“TPM”), a second version of TPM, or trusted cryptography module (“TCM”).
8. The apparatus of claim 6 , further comprising computer program instructions that, when executed by the computer processor, cause the apparatus to carry out the steps of:
receiving, after initialization of the multinode system, a selection of a second cryptoprocessor type; and
responsive to receiving the second selection, changing the primary node of the multinode system to a node that includes a cryptoprocessor of the second cryptoprocessor type.
9. The apparatus of claim 8 , further comprising computer program instructions that, when executed by the computer processor, cause the apparatus to carry out the step of adjusting a boot order so that an operating system of the multinode system remains the same after changing the primary node.
10. The apparatus of claim 6 , wherein the selection is based at least on a security level of the first cryptoprocessor type and a security level of a second cryptoprocessor type.
11. A computer program product comprising a non-transitory computer readable medium, the computer readable medium comprising computer program instructions that, when executed, cause a computer to carry out the steps of:
receiving a selection of a first cryptoprocessor type; and
identifying and designating as a primary node a node within a multinode system having a cryptoprocessor of the first cryptoprocessor type; and
prohibiting a cryptoprocessor type firmware update of a cryptoprocessor of a non-primary node of the multinode system.
12. The computer program product of claim 11 , wherein the cryptoprocessor type is selected from the group consisting of: a first version of trusted platform module (“TPM”), a second version of TPM, or trusted cryptography module (“TCM”).
13. The computer program product of claim 11 , further comprising computer program instructions that, when executed, cause the computer to carry out the steps of:
receiving, after initialization of the multinode system, a selection of a second cryptoprocessor type; and
responsive to receiving the second selection, changing the primary node of the multinode system to a node that includes a cryptoprocessor of the second cryptoprocessor type.
14. The computer program product of claim 13 , further comprising computer program instructions that, when executed, cause the computer to carry out the step of adjusting a boot order so that an operating system of the multinode system remains the same after changing the primary node.
15. The computer program product of claim 11 , wherein the selection is based at least on a security level of the first cryptoprocessor type and a security level of a second cryptoprocessor type.
16. The computer program product of claim 11 wherein the computer readable medium comprises a storage medium.